nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Move use of user_devpts_t from terminal.fc to userdomain.fc

Browse Source 
The type user_devpts_t is actually declared in userdomain.te and moving it
removes a dependency of the base module (which terminal is a part) on a
module.

Moved the file contexts to label slave pseudo terminals with the
user_devpts_t type from terminal.fc to userdomain.fc.

Signed-off-by: James Carter <jwcart2@tycho.nsa.gov>
This commit is contained in:
James Carter 2018-04-11 14:55:23 -04:00 committed by Chris PeBenito
parent 6226181924
commit 90b214c004
2 changed files with 2 additions and 1 deletions
policy/modules
kernel
terminal.fc
system
userdomain.fc

1
policy/modules/kernel/terminal.fc
View File

@ -24,7 +24,6 @@
/dev/pty/.* -c gen_context(system_u:object_r:bsdpty_device_t,s0) /dev/pty/.* -c gen_context(system_u:object_r:bsdpty_device_t,s0)
/dev/pts -d gen_context(system_u:object_r:devpts_t,s0-mls_systemhigh) /dev/pts -d gen_context(system_u:object_r:devpts_t,s0-mls_systemhigh)
/dev/pts/[0-9]+ -c gen_context(system_u:object_r:user_devpts_t,s0)
# if /dev/ptmx is a symlink to /dev/pts/ptmx then we need to have /dev/pts/ptmx # if /dev/ptmx is a symlink to /dev/pts/ptmx then we need to have /dev/pts/ptmx
# relabelled before sshd etc are ready to accept connections # relabelled before sshd etc are ready to accept connections
/dev/pts/ptmx -c gen_context(system_u:object_r:ptmx_t,s0) /dev/pts/ptmx -c gen_context(system_u:object_r:ptmx_t,s0)

2
policy/modules/system/userdomain.fc
View File

@ -10,3 +10,5 @@ HOME_DIR/\.pki(/.*)? gen_context(system_u:object_r:user_cert_t,s0)
# new genhomedircon required for these patterns # new genhomedircon required for these patterns
/run/user/%{USERID} -d gen_context(system_u:object_r:user_runtime_t,s0) /run/user/%{USERID} -d gen_context(system_u:object_r:user_runtime_t,s0)
/run/user/%{USERID}/.+ <<none>> /run/user/%{USERID}/.+ <<none>>
/dev/pts/[0-9]+ -c gen_context(system_u:object_r:user_devpts_t,s0)